Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
File: 0aHv0iQTWusJg56ovbjNxZnOZX8.cer (raw, json)
Hash identifier: gT8QmTnNs32DXGapgik9f6ORjOZmyfOBkvIpmRqJ8xM=
Subject key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 512C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 27 Feb 2026 03:03:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 185.54.88.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20780 (0x512c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Feb 27 03:03:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:9e:5a:d7:1c:dc:ce:eb:fa:f4:22:48:d7:
94:3d:cb:65:12:83:09:c8:e9:55:a5:82:4e:49:c2:
28:e6:6a:97:b0:69:dc:c1:77:80:cc:3f:fd:fb:14:
c2:d6:25:37:9b:00:3f:3b:f7:f9:8c:ce:cd:10:29:
5f:2f:19:31:2c:f7:a9:6a:ac:d3:2f:1d:13:51:f2:
b7:41:d0:c9:8a:f7:23:3d:f0:85:df:3c:c3:c3:06:
09:19:c7:97:02:e3:3e:08:90:9b:0d:0f:ea:6c:62:
72:0b:37:9f:b7:74:03:3c:65:49:b8:3b:8a:f3:30:
a5:67:3d:cc:59:82:3e:4f:79:10:50:5a:ae:ad:52:
23:47:2e:76:eb:60:49:9e:4e:94:84:81:48:02:68:
61:8a:23:9e:74:19:b2:cd:2e:77:f0:d3:9a:ba:03:
67:2c:8b:a2:8d:e0:47:c8:c2:e7:e4:da:57:f7:0f:
72:a8:b6:7f:fa:aa:ca:f1:c0:e6:b8:61:ae:93:85:
99:6f:a2:6e:b5:10:40:53:ae:4a:47:41:45:61:1e:
35:8a:80:11:7b:99:bc:1c:92:e1:3b:82:3a:ab:a5:
bc:43:75:c4:27:0c:9d:3a:c8:5a:68:9a:70:fe:fb:
3f:12:7a:c7:76:3d:57:78:57:0a:27:7b:9b:db:b1:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.54.88.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:67:9a:2e:b8:55:11:e5:06:2f:5a:74:80:4e:81:62:6a:fd:
25:3d:89:42:cd:1e:16:a2:7c:78:b8:43:b2:59:fa:de:23:85:
66:91:56:0a:19:cd:d0:50:a1:c2:3b:d8:b5:84:cc:ab:a2:92:
ab:df:f6:89:a4:a3:2c:8b:c9:f7:7a:e1:59:f0:c0:09:f2:5d:
49:85:26:f0:83:e1:99:21:6b:49:c0:f0:d4:a0:72:94:cf:9a:
1f:f6:87:d5:e4:ab:93:48:88:c7:3e:a9:7e:6b:db:d1:15:6f:
4a:bd:1b:ee:16:44:05:02:1d:06:2a:33:37:21:00:2a:97:4c:
08:40:52:80:a1:f6:07:5e:a0:a0:03:3e:7c:e2:a8:4e:74:f2:
5b:14:fb:28:25:a4:e1:a9:76:a6:d8:de:a7:92:bd:94:c4:16:
cf:8c:54:38:a4:b0:8c:eb:cc:4d:6f:f4:7a:63:4d:a7:ca:61:
68:af:30:ef:99:81:6e:42:59:ff:2d:65:8f:62:43:42:f6:68:
5c:09:7e:01:50:49:3d:59:b6:88:3e:3f:e4:d3:45:ff:27:31:
5f:a9:61:90:e3:0f:0b:a8:8e:4e:09:17:7f:b5:cf:95:bb:27:
f0:e9:c2:7d:d6:42:44:c0:4c:fe:08:9a:f2:7a:bc:73:02:9d:
e5:d7:bc:25
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICUSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwMjI3MDMwMzMyWhcNMjcwNzAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE3RDlGQzExMC8GA1UEBRMoRDFBMUVGRDIyNDEzNUFFQjA5ODM5RUE4
QkRCOENEQzU5OUNFNjU3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANHMnlrXHNzO6/r0IkjXlD3LZRKDCcjpVaWCTknCKOZql7Bp3MF3gMw//fsUwtYl
N5sAPzv3+YzOzRApXy8ZMSz3qWqs0y8dE1Hyt0HQyYr3Iz3whd88w8MGCRnHlwLj
PgiQmw0P6mxicgs3n7d0AzxlSbg7ivMwpWc9zFmCPk95EFBarq1SI0cudutgSZ5O
lISBSAJoYYojnnQZss0ud/DTmroDZyyLoo3gR8jC5+TaV/cPcqi2f/qqyvHA5rhh
rpOFmW+ibrUQQFOuSkdBRWEeNYqAEXuZvByS4TuCOqulvEN1xCcMnTrIWmiacP77
PxJ6x3Y9V3hXCid7m9uxQ7UCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTRoe/SJBNa
6wmDnqi9uM3Fmc5lfzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0Q5RkMvN0EzMDJEMDA0MkIxMTFFQzlGMjRBMDZFQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdEOUZDLzdBMzAyRDAwNDJCMTExRUM5RjI0QTA2RUM0RjlBRTAyLzBhSHYwaVFU
V3VzSmc1Nm92YmpOeFpuT1pYOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEArk2WDANBgkqhkiG9w0BAQsFAAOCAQEAv2eaLrhVEeUGL1p0gE6B
Ymr9JT2JQs0eFqJ8eLhDsln63iOFZpFWChnN0FChwjvYtYTMq6KSq9/2iaSjLIvJ
93rhWfDACfJdSYUm8IPhmSFrScDw1KBylM+aH/aH1eSrk0iIxz6pfmvb0RVvSr0b
7hZEBQIdBiozNyEAKpdMCEBSgKH2B16goAM+fOKoTnTyWxT7KCWk4al2ptjep5K9
lMQWz4xUOKSwjOvMTW/0emNNp8phaK8w75mBbkJZ/y1lj2JDQvZoXAl+AVBJPVm2
iD4/5NNF/ycxX6lhkOMPC6iOTgkXf7XPlbsn8OnCfdZCRMBM/gia8nq8cwKd5de8
JQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:56 2026 by rpki-client